PT-2025-34703 · Arista Networks · Arista Eos

Chris Laffin · Published 2025-08-25 · Updated 2025-10-07 · CVE-2025-6188

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Arista EOS (affected versions not specified)

Description: Maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpected behaviors, especially for UDP based services that do not perform authentication.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2025-6188

Affected Products

Arista Eos

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-6188 · Security Note
• https://arista.com/en/support/advisories-notices/security-advisory/22021-security-advisory-0121 · Note
• https://twitter.com/f1tym1/status/1975477380362678626 · Twitter Post
• https://twitter.com/CVEnew/status/1960078610456330493 · Twitter Post
• https://t.me/cveNotify/133706 · Telegram Post
• https://t.me/cveNotify/133452 · Telegram Post
• https://t.me/CVEtracker/30866 · Telegram Post